This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft File: uQ9AvbnmZHaekXWQ942253GT11E.mft (raw, json) Hash identifier: /O26UyvDNpLryqqKmybD12RHAn4hXdbwkaXoPkS8xpw= Subject key identifier: 0D:43:4D:18:83:D1:0A:07:0A:B0:EF:26:92:A6:BE:13:68:1D:1F:51 Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51 Certificate issuer: /CN=b90f40bdb9e664769e917590f78db6e77193d751 Certificate serial: 019AF46593788A5356BDA38D89FD9D499E28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft Manifest number: 0A1F Signing time: Sat 06 Dec 2025 16:01:28 +0000 Manifest this update: Sat 06 Dec 2025 16:01:28 +0000 Manifest next update: Sun 07 Dec 2025 16:01:28 +0000 Files and hashes: 1: IVNizmINzGKtS16vA6MUtf-GXl0.roa (hash: G8i6jSbmxzUZcDObDJ5m5iiPjmE+XboSGsF4lQOtdC8=) 2: uQ9AvbnmZHaekXWQ942253GT11E.crl (hash: xM94ztmIF4ld1VrGMCNlyVUxOpXixvbiGUshtIuig4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:93:78:8a:53:56:bd:a3:8d:89:fd:9d:49:9e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751 Validity Not Before: Dec 6 16:01:28 2025 GMT Not After : Dec 7 16:01:28 2025 GMT Subject: CN=0d434d1883d10a070ab0ef2692a6be13681d1f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ff:42:92:3b:e1:d2:63:00:93:bd:f1:17:dc: 99:03:e0:1d:3e:d4:f9:75:98:83:06:80:90:5a:65: ce:90:77:b7:e5:94:db:68:bb:30:2b:de:74:9f:80: ef:c8:72:61:f1:ab:ca:f9:4c:c6:d8:03:61:63:90: ac:6d:6e:ed:46:aa:b9:8c:66:fd:2e:fe:22:15:a5: 8b:73:95:70:5d:81:2d:97:75:62:06:09:de:e9:74: c3:e4:24:23:e0:ea:88:23:63:a8:d5:02:26:41:86: b5:71:f2:b4:77:18:bd:31:60:32:30:96:55:80:b8: 58:d0:31:9c:74:87:8e:ca:c4:56:02:0c:84:f8:92: bc:e9:c7:0d:48:b4:4b:d4:be:a1:01:de:22:de:fd: 89:e6:2e:fc:82:4e:4f:27:8d:b5:02:76:67:d4:f6: 08:89:5d:ef:12:d0:d6:41:1d:d9:92:87:df:b3:4c: de:cf:59:66:d1:75:6b:31:51:46:4c:9b:c1:c5:ac: 4b:d6:52:af:a8:4e:e2:29:2c:6c:0f:4f:7c:1b:7f: d2:91:06:2e:ae:b0:02:c0:9f:50:9a:72:73:3e:1b: 7c:69:f3:ea:bf:eb:ad:db:7c:f4:85:b3:7a:51:69: 9c:0e:f4:a3:27:c4:c4:0d:68:50:26:52:a8:85:aa: 3e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:43:4D:18:83:D1:0A:07:0A:B0:EF:26:92:A6:BE:13:68:1D:1F:51 X509v3 Authority Key Identifier: keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3a:c2:4d:46:c3:84:66:97:77:62:11:9a:54:a0:92:c8:a0: 77:02:88:31:6f:bc:5a:d4:e0:67:0e:3a:d7:49:59:35:68:37: c3:6c:91:8f:8b:e3:e4:54:ef:e8:93:0a:0f:a1:08:4e:c1:92: a5:70:aa:48:f1:4c:af:a9:e4:45:ed:0d:cd:38:18:31:50:96: 73:e5:96:df:ae:9f:88:7a:ea:0e:88:2f:4e:c6:59:3c:76:8f: 56:03:0e:50:a2:e1:89:ac:95:1d:0d:2e:6b:b7:ae:39:e4:5e: d9:53:ae:f9:69:e1:b1:e5:f2:9e:92:37:d2:db:9c:62:6f:17: f8:71:ea:7f:af:f4:06:b0:ba:23:a9:84:6d:2b:0b:2f:50:83: 12:4b:36:ea:36:59:21:e5:c7:bf:b7:c6:e6:b0:73:49:e2:ee: 71:61:72:6f:e9:e9:19:26:2d:c8:15:e8:e7:5b:09:b9:29:6f: c3:91:11:79:55:12:71:8b:1e:6b:3a:a6:cc:74:bd:76:0c:9d: 53:88:db:7c:10:40:98:f4:26:9a:fa:35:50:f0:f0:c2:94:7e: c6:48:58:69:0a:76:03:69:6d:0e:9b:79:80:c3:53:81:c6:dc: 28:b2:62:c2:70:0e:21:b3:0d:05:dd:17:19:70:bb:b3:0e:f6: ad:38:55:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZZN4ilNWvaONif2dSZ4oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MGY0MGJkYjllNjY0NzY5ZTkxNzU5MGY3OGRiNmU3NzE5 M2Q3NTEwHhcNMjUxMjA2MTYwMTI4WhcNMjUxMjA3MTYwMTI4WjAzMTEwLwYDVQQD EygwZDQzNGQxODgzZDEwYTA3MGFiMGVmMjY5MmE2YmUxMzY4MWQxZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP9Ckjvh0mMAk73xF9yZA+AdPtT5 dZiDBoCQWmXOkHe35ZTbaLswK950n4DvyHJh8avK+UzG2ANhY5CsbW7tRqq5jGb9 Lv4iFaWLc5VwXYEtl3ViBgne6XTD5CQj4OqII2Oo1QImQYa1cfK0dxi9MWAyMJZV gLhY0DGcdIeOysRWAgyE+JK86ccNSLRL1L6hAd4i3v2J5i78gk5PJ421AnZn1PYI iV3vEtDWQR3Zkoffs0zez1lm0XVrMVFGTJvBxaxL1lKvqE7iKSxsD098G3/SkQYu rrACwJ9QmnJzPht8afPqv+ut23z0hbN6UWmcDvSjJ8TEDWhQJlKohao+lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1DTRiD0QoHCrDvJpKmvhNoHR9RMB8GA1UdIwQY MBaAFLkPQL255mR2npF1kPeNtudxk9dRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVE5QXZibm1aSGFla1hXUTk0MjI1M0dUMTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iOTJjYzMtZGRmMS00M2NiLWI0YjEt NDE1NGRhNWNlYjliLzEvdVE5QXZibm1aSGFla1hXUTk0MjI1M0dUMTFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9iOTJjYzMtZGRmMS00M2NiLWI0YjEtNDE1NGRhNWNlYjli LzEvdVE5QXZibm1aSGFla1hXUTk0MjI1M0dUMTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTrCTUbD hGaXd2IRmlSgksigdwKIMW+8WtTgZw4610lZNWg3w2yRj4vj5FTv6JMKD6EITsGS pXCqSPFMr6nkRe0NzTgYMVCWc+WW366fiHrqDogvTsZZPHaPVgMOUKLhiayVHQ0u a7euOeRe2VOu+WnhseXynpI30tucYm8X+HHqf6/0BrC6I6mEbSsLL1CDEks26jZZ IeXHv7fG5rBzSeLucWFyb+npGSYtyBXo51sJuSlvw5EReVUScYseazqmzHS9dgyd U4jbfBBAmPQmmvo1UPDwwpR+xkhYaQp2A2ltDpt5gMNTgcbcKLJiwnAOIbMNBd0X GXC7sw72rThVKA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:12:53 2025 by rpki-client